I'd like to set up a certificate authority, which I can then import to all the company's browsers and systems to get rid of all those nasty client warnings when using HTTPS or SSL.


You can use TinyCA, a graphical front-end for OpenSSL that lets you manage the tasks of a certificate authority.

Beware that the TinyCA website seems hard to reach at times.


I recommend using OpenCA and here is the install guide. This is a full fledge PKI suite, which includes an OCSP server to immediately revoke certificates. It also has a PKI Resource Protocol server. I have personally used OpenCA and it is what you want.

If you really like RedHat and Java then you might want to go with RedHat Certificate System.


Have a look at this: http://novosial.org/openssl/ca/

And for the entire work flow: http://novosial.org/openssl/

  • 3
    Links are broken as of 5/11 – G__ May 28 '11 at 21:11

You can craft your own certificates with openssl command line tool.

It is possible to generate the root certificate, hence the (sub-)certificates you need.

You can use the following tool, simplifying the whole process: https://github.com/auino/your-own-ssl-certificate-authority

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.